Valarian Technologies Limited, a company registered in England with company number 12295525 (“Valarian”, “we”, “our” or “us”) is the ‘data controller’ of the personal data described below. Our address is: 8 Warner Yard, London, England, EC1R 5EY.

This Privacy Policy explains why and how we process your personal data, whether you are:

• A visitor to our website (https://valarian.com/) or our social media pages;
• Part of an account management / IT support team at an organisation we sell our products and services to (including where we communicate with you by email or telephone). This organisation (“your organisation”) could be your employer or other organisation or entity with whom you are connected, who has purchased an enterprise license to deploy Valarian’s technologies; or
• (In very limited circumstances) An end user of Valarian’s software such as Valarian for Microsoft Teams (“App”) subject to the applicable Valarian App End User License Agreement (“EULA”).

In this Privacy Policy, “you” refers to any individual whose personal data we process in accordance with the General Data Protection Regulation, as implemented in the United Kingdom where Valarian is established (the “GDPR”).

Please note that, if you are an end user of the App, we do not host any software or data (including personal information) for and on behalf of your organisation. This means that every time you send a message, make a call, or share a file with Valarian or with Valarian for Microsoft Teams enabled, this data never leaves your own organisation’s firewall or hosting environment (as applicable). As such, the personal data we have access to and may process about you is very limited, and you will need to contact your organisation if you want to access copies of messages, etc.

This Privacy Policy was last updated in October 2023. We reserve the right to update this Privacy Policy from time to time. Any updates will be published at https://valarian.com/.

Information you provide to us – you may provide us with personal data, if you are an existing or potential account manager / IT team member within your organisation, sign up for a demo through our website, apply for an open job position through our website, and when you contact us through any other channel to enquire about our products and services. This data may include your name, contact details (email address and telephone number) and information about your organisation.

We use this information to communicate with you about our products and to provide our services to your organisation, as is necessary for the performance of our contract with your organisation and on the basis of our legitimate interest in promoting our business (via our website and social media pages and, occasionally, via direct marketing to your organisation, e.g. where we send you communications about new product features, etc.).

Information we collect automatically – we may collect data about your device (including your IP address) when you visit our website and use this to facilitate your interactions with our website or our social media pages, as is necessary for our legitimate interest in providing a fully functioning website.

We may also collect technical information about the devices you use to run the App, in accordance with the EULA. Please note that we never collect personal data about end users through the App and we have no access to messages, calls or files exchanged when the App is in use.

Information from your organisation – we may also receive information about you from your organisation, if they have identified you to us as their member of staff for App licensing purposes, or as part of a report to us made for troubleshooting purposes, etc. We do not require, and we will not ask your organisation for any personal data about end users. However, the organisation may provide us with certain personal details for App licensing and support purposes. Please note that we will process that personal data on your organisation’s behalf as a ‘data processor’ and your organisation remains responsible for your privacy in such a scenario.

We may share your personal data with third parties in the following circumstances:

• Our employees, contractors and/or professional advisers, for the purpose of connecting you to the right members of staff who can help you with enquiries about our products and services, to improve those products and services, to obtain advice from our professional advisers, or, if necessary, to enforce any applicable terms and conditions or agreements for our products and services;
• If we are under a duty to disclose or share your personal data in order to comply with any legal obligation (for example, if required to do so by a court order or for the purposes of prevention of fraud or other crimes; however, even under these circumstances, we do not have access to any messages, calls or files shared using our software, including the App);
• We may also transfer your personal information to a third party as part of a sale of a part or all of our business and assets to any third party or as part of any business restructuring or reorganization process.

If we do share your personal data with a third party, we will take the necessary steps to ensure that your privacy rights are protected in accordance with this Privacy Policy.

We do not collect or host any personal data in connection with the App; it is up to your organisation to arrange for this and choose whether to store that data on servers owned or controlled by them.

In relation to the limited personal data for which we are a data controller (regarding website visitors, account managers and IT staff within your organisation), we host the majority of such data on secure servers located in the UK / EEA where personal data is protected by robust data protection laws, including the GDPR. We take all appropriate technical and organisational measures to ensure the effective and secure processing of your personal data.

Where we use third parties to process personal data on our behalf, we ensure that there are appropriate agreements in place that adhere to the same data security standards that we have at Valarian. You can find out more about the protection of your personal data (including when it is transferred outside the UK / EEA) by contacting us using the contact details below.

Our current data retention policy is to delete or destroy (to the extent we are able to) personal data in accordance with the following rules:

• Records related to contracts – seven years from either the end of our contract with your organisation or the date you last used our products or placed an order with us; and
• Marketing and sales contact records – four years from the date of your last interaction with us, if your organisation has not proceeded to purchase our products or services.

For any category of personal data not specifically defined in this Privacy Policy, and unless otherwise specified by applicable law, we will typically retain that information for at least six years from the date of receipt. The retention periods stated in this notice can be prolonged or shortened as may be required (for example, where archived copies of records are required for legal, tax or regulatory purposes).

With respect to your personal data for which we are the data controller, the GDPR gives you rights to:

• Request access to, and copies of, the personal data that we hold about you;
• Require us to correct the personal data we hold about you if it is incorrect;
• Require us to erase your personal data, in certain circumstances;
• Require us to restrict our data processing activities, in certain circumstances;
• Where our processing is based on your consent, you may withdraw that consent;
• Where our processing is carried out by automated means, you may request information on the personal data we hold about you in a reasonable format specified by you (including for the purpose of you transmitting that personal data to another data controller); and
• To object, on grounds relating to your particular situation, to any of our processing activities where you feel this has a disproportionate impact on your rights.

Please note that these rights are not absolute, and we may be entitled or required to refuse requests where exceptions apply. If you wish to exercise any of these rights, please contact us using the contact details below.

If you are not satisfied with how we are processing your personal data, you can make a complaint to a data protection supervisory authority in the UK / EEA, including the data protection regulator in the UK / EEA country where your organisation is based. For the UK, this is the Information Commissioner’s Office (“ICO”). The ICO’s contact details can be found on their website at: https://ico.org.uk/.

If you would like to contact us with your views about our privacy practices, or with any enquiry or complaint relating to your personal information or how it is processed by Valarian, you can do so using the details below:

Email: info@valarian.com;

Post: 8 Warner Yard, London, England, EC1R 5EY.